TY - JOUR
T1 - Un profile de UML para diseñar almacenes de datos seguros
AU - Villarroel, Rodolfo
AU - Fernández-Medina, Eduardo
AU - Trujillo, Juan
AU - Piattini, Mario
N1 - Funding Information:
Esta investigación es parte de los proyectos CALIPO (TIC2003-07804-C05-C03) y RETISTIC (TIC2002-12487-E), soportados por la Dirección General de Investigación del Ministerio de Ciencia y Tecnología, y la red VII-J.RITOS2 financiada por CYTED.
Funding Information:
Nuestra aportación al área de modelado de la seguridad en sistemas de información y bases de datos, radica principalmente en una solución basada en un profile. Además, el uso de esta extensión facilitará la implementación en algunos de los SGBD que tienen la capacidad para implementar bases de datos multinivel, tales como Oracle Label Security y DB2 Universal Database. Considerando que los almacenes de datos, bases de datos multidimensionales y aplicaciones OLAP son usadas como mecanismos muy poderosos para el descubrimiento de información de negocio crucial en los procesos de toma de decisiones estratégicas, esta propuesta provee avances interesantes en la mejora de la seguridad de los sistemas de soporte a las decisiones y a la protección de información sensible que generalmente gestionan estos sistemas.
PY - 2005
Y1 - 2005
N2 - Data Warehouses (DW's), Multidimensional Databases, and On-Line Analytical Processing applications are used as a very powerful mechanism for discovering crucial business information. Considering the extreme importance of the information managed by these kinds of applications, it is essential to specify security measures from early stages of the DW design in the MD modeling process, and enforce them. In the past years, there have been some proposals for representing the main MD modeling properties at the conceptual level. Nevertheless, none of these proposals, considers security issues as an important element in their models, so they do not allow us to specify confidentiality constraints to be enforced by the applications that will regarding DW's and their corresponding MD modeling properties and we propose an UML profile that allows us to specify main security aspects in the conceptual MD modeling. We show the benefit of our approach by applying this profile to an example. Finally, we also sketch how to implement the security aspects considered in our conceptual modeling approach in a commercial DBMS.
AB - Data Warehouses (DW's), Multidimensional Databases, and On-Line Analytical Processing applications are used as a very powerful mechanism for discovering crucial business information. Considering the extreme importance of the information managed by these kinds of applications, it is essential to specify security measures from early stages of the DW design in the MD modeling process, and enforce them. In the past years, there have been some proposals for representing the main MD modeling properties at the conceptual level. Nevertheless, none of these proposals, considers security issues as an important element in their models, so they do not allow us to specify confidentiality constraints to be enforced by the applications that will regarding DW's and their corresponding MD modeling properties and we propose an UML profile that allows us to specify main security aspects in the conceptual MD modeling. We show the benefit of our approach by applying this profile to an example. Finally, we also sketch how to implement the security aspects considered in our conceptual modeling approach in a commercial DBMS.
KW - Data models
KW - Data security
KW - Object-oriented methods
KW - Security
UR - http://www.scopus.com/inward/record.url?scp=78149369053&partnerID=8YFLogxK
U2 - 10.1109/TLA.2005.1468661
DO - 10.1109/TLA.2005.1468661
M3 - Conference article
AN - SCOPUS:78149369053
SN - 1548-0992
VL - 3
SP - 40
EP - 48
JO - IEEE Latin America Transactions
JF - IEEE Latin America Transactions
IS - 1
M1 - 1468661
T2 - 9th Jornadas de Ingenieria del Software y Bases de Datos, JISBD'2004
Y2 - 10 November 2004 through 12 November 2004
ER -